Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: Rwo+Ylm3qkgAczwj+r0kUbpfJfO2ZTuSCzWy7n1DJik=
Subject key identifier: C5:55:90:A7:B6:A4:9B:20:DA:CC:35:06:39:59:08:4A:D1:0C:D2:9D
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 019CAD22652E80615FF4B36595A364029E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 06:00:38 +0000
Manifest this update: Mon 02 Mar 2026 06:00:38 +0000
Manifest next update: Tue 03 Mar 2026 06:00:38 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: 5UhnXyee6raQhVO++Na2vIOpj4rriKwZn5UJdEjGwpM=)
2: vM4pcQR4cpfxqBvoAa4ezpfAooA.roa (hash: q37j9EaxOdTgZgbNR9N/Sjv4ip1H9vll46kAjU29riM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:65:2e:80:61:5f:f4:b3:65:95:a3:64:02:9e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Mar 2 06:00:38 2026 GMT
Not After : Mar 3 06:00:38 2026 GMT
Subject: CN=c55590a7b6a49b20dacc35063959084ad10cd29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0d:f2:bb:1c:20:c6:2f:58:ae:e0:06:a2:11:
d2:64:6b:8f:20:98:1b:e5:1a:91:11:22:67:4c:95:
ff:45:d2:e7:81:45:fd:17:ae:0d:8a:e0:9f:da:9e:
61:c0:64:eb:6c:ae:66:26:62:5a:3e:4d:a8:e1:a7:
93:4c:25:c8:9b:6b:bb:0a:d5:d6:5a:55:43:30:02:
83:0f:b9:c2:20:24:b9:1c:8a:f4:7d:32:da:5e:89:
38:af:cb:da:6d:c8:71:5d:42:73:52:05:69:c2:c5:
19:e9:20:fb:35:81:02:25:ce:2a:02:fa:93:c8:b1:
81:b8:21:51:41:11:ce:02:d4:5f:a5:ac:50:86:06:
f3:52:53:83:29:2c:d0:78:7b:18:02:fb:cd:cd:c7:
89:ff:33:2d:24:bc:5c:2f:b9:1a:ab:b7:c5:54:10:
65:92:41:0e:ae:23:3c:31:a3:e4:f6:f0:9e:f1:00:
e6:c9:75:ea:6a:53:fb:5e:93:91:29:75:43:4b:b8:
55:f5:33:d5:cf:a7:3c:69:ff:58:e0:09:1b:24:0e:
87:bb:a5:26:2a:a9:2d:ef:89:02:d2:d7:5f:ff:1a:
a3:3c:3b:77:d8:2e:bc:73:73:57:6f:ff:f0:8a:7d:
ba:6d:3f:6b:1f:40:61:79:ea:e4:8c:cb:b5:ac:51:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:55:90:A7:B6:A4:9B:20:DA:CC:35:06:39:59:08:4A:D1:0C:D2:9D
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:60:06:5e:20:84:be:f5:3b:e0:59:63:e8:39:2c:43:da:ae:
73:a4:fd:ec:97:d7:e0:7f:66:ce:f6:a9:6c:a3:a4:af:2a:83:
27:6f:f6:d8:5f:b2:df:c0:1b:6a:32:42:31:e0:00:69:d3:ab:
d5:32:08:b8:ac:a7:49:0f:71:ee:d5:29:14:d1:a0:b5:c8:1b:
8a:5c:6a:35:0e:c7:7e:2b:01:b6:34:21:60:8b:14:e8:9f:79:
27:11:60:e3:63:b6:b2:7e:15:19:ea:7f:14:79:6d:76:3f:26:
57:8c:fc:f6:ac:e1:e2:d5:a6:8c:0a:54:2c:34:d6:7d:ea:b6:
d6:5c:f9:38:71:e7:bc:6e:ff:a8:79:e5:92:c7:8b:38:3f:35:
a7:ff:7d:31:cc:0d:97:8c:00:c8:2f:64:6a:e0:65:ec:47:3e:
f9:8c:41:f9:97:dc:10:ad:ca:83:04:43:a8:be:08:e6:8f:d6:
b3:c4:fd:d1:48:1a:b7:3f:15:cc:6f:5c:ab:f8:e7:9f:11:db:
71:04:a1:b3:c4:a4:09:51:68:c9:d5:dc:2d:f2:83:55:99:e4:
2c:02:9e:16:76:c1:95:1f:d0:5b:15:09:25:16:60:16:72:68:
4b:ac:e5:76:3f:a5:33:75:f6:fb:01:2b:07:7b:42:6d:d4:64:
1c:74:fb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:41:55 2026 by rpki-client